CVE-2008-1803

Integer signedness error in the xrealloc function rdesktop.c in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channelprocess function was not specified by the original researcher...

Integer overflow

Integer signedness error in the xrealloc function rdesktop.c in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channelprocess function was not specified by the original researcher...

CVE-2008-1803

Integer signedness error in the xrealloc function rdesktop.c in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channelprocess function was not specified by the original researcher...

CVE-2008-1803

CVE-2008-1803 affects rdesktop 1.5.0, describing an integer signedness error in xrealloc() that can cause a heap-based overflow and remote code execution. The connected advisories confirm related fixes in multiple distributions (e.g., RHSA-2008-0575; CentOS CES A-2008:0575; Ubuntu USN-646-1), ind...

Secunia Research: Lotus Notes EML Reader Buffer Overflows

====================================================================== Secunia Research 08/04/2008 - Lotus Notes EML Reader Buffer Overflows - ====================================================================== Table of Contents Affected...

Fedora 7 : cups-1.2.12-10.fc7 (2008-2897)

Three security issues have been fixed in this update: A buffer overflow when processing GIF files A heap-based overflow in a CUPS helper program, used for searching documentation A buffer overflow when processing HP-GL/2 files Note that Tenable Network Security has extracted the preceding...

Fedora 8 : cups-1.3.6-4.fc8 (2008-2131)

Two security issues have been fixed in this update: A buffer overflow when processing GIF files A heap-based overflow in a CUPS helper program, used for searching documentation This update also fixes a problem with processing some JPEG files. Note that Tenable Network Security has extracted the...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : cupsys vulnerabilities (USN-598-1)

It was discovered that the CUPS administration interface contained a heap- based overflow flaw. A local attacker, and a remote attacker if printer sharing is enabled, could send a malicious request and possibly execute arbitrary code as the non-root user in Ubuntu 6.06 LTS, 6.10, and 7.04. In...

USN-598-1: CUPS vulnerabilities

It was discovered that the CUPS administration interface contained a heap- based overflow flaw. A local attacker, and a remote attacker if printer sharing is enabled, could send a malicious request and possibly execute arbitrary code as the non-root user in Ubuntu 6.06 LTS, 6.10, and 7.04. In...

Debian: Security Advisory (DSA-546-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 542-1 (qt-copy)

The remote host is missing an update to qt-copy announced via advisory DSA 542-1. OpenVAS Vulnerability Test $Id: deb5421.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 542-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 546-1 (gdk-pixbuf)

The remote host is missing an update to gdk-pixbuf announced via advisory DSA 546-1. OpenVAS Vulnerability Test $Id: deb5461.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 546-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 549-1 (gtk+2.0)

The remote host is missing an update to gtk+2.0 announced via advisory DSA 549-1. OpenVAS Vulnerability Test $Id: deb5491.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 549-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Miniweb 0.8.19 - Multiple Vulnerabilities

Miniweb 0.8.19 - Multiple Vulnerabilities MiniWeb Multiple Vulnerabilities Introduction MiniWeb is a mini HTTP server implementation written in C language, featuring low system resource consumption, high efficiency, good flexibility and high portability. It is capable to serve multiple clients wi...

DTSA-109-1 xine-lib - heap-based buffer overflow

Bulletin has no description...

Heap overflow

Heap-based buffer overflow in Apple QuickTime before 7.3.1 allows remote attackers to execute arbitrary code via a crafted QTL file...

[SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1422 [email protected] http://www.debian.org/security/ Steve Kemp December 07, 2007 http://www.debian.org/security/faq -...

CVE-2007-6277

Multiple buffer overflows in Free Lossless Audio Codec FLAC libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large 1 Metadata Block Size, 2 VORBIS Comment String Size, 3 Picture Metadata MIME-TYPE Size, 4 Picture Description Size, 5 Picture Data Length, 6...

GLSA-200711-21 : Bochs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200711-21 Bochs: Multiple vulnerabilities Tavis Ormandy of the Google Security Team discovered a heap-based overflow vulnerability in the NE2000 driver CVE-2007-2893. He also discovered a divide-by-zero error in the emulated flopp...

CVE-2007-1321

Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks, aka QEMU NE2000 "receive" integer signedness error. NOTE: this identifier wa...